Privacy Policy

Section 1

Introduction

This Privacy Policy ("Policy") sets out how bossbaby88 ("the Platform", "we", "us", or "our") collects, uses, discloses, stores, and protects the personal data of individuals ("Member", "you", or "your") who register for or use any service available at bossbaby88.cam.

bossbaby88 takes its obligations regarding personal data seriously. We recognise that the privacy and security of your information is fundamental to the trust you place in our platform as a Malaysian online gaming service. This Policy is designed to be transparent about our data practices and to explain clearly how your information is handled throughout the lifecycle of your account.

By registering an account, depositing funds, or otherwise accessing the Platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.

Section 2

Definitions

For the purposes of this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means bossbaby88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of bossbaby88, including payment processors and identity verification providers.
• "KYC" means Know Your Customer — the identity and address verification procedures required to comply with anti-money laundering and fraud prevention obligations.
• "Cookies" means small text files placed on your device by the Platform to support account sessions, analytics, and user experience functions.
• "Member" means any individual who has completed registration and holds an active account on the Platform.

Section 3

Data We Collect

bossbaby88 collects personal data through multiple touchpoints during your relationship with the Platform. The categories of data collected include:

3.1 Registration Data

When you create an account, we collect your full name, date of birth, residential address (including city — for example, Kuala Lumpur, Penang, or Johor Bahru), email address, and mobile phone number. This information is required to open and maintain your account.

3.2 Identity Verification Data

To fulfil KYC obligations and comply with anti-money laundering requirements, we may collect copies of government-issued identity documents such as a Malaysian MyKad or passport, along with proof of address documentation where required.

3.3 Financial Data

We collect records of deposits, withdrawals, and transaction history associated with your account. Payment method details — such as bank account numbers associated with Maybank, CIMB, Public Bank, or Hong Leong accounts, or eWallet identifiers for Touch 'n Go, Boost, or GrabPay — are processed in accordance with PCI-DSS standards or handled directly by the relevant payment provider.

3.4 Usage & Technical Data

We automatically collect certain technical data when you access the Platform, including your IP address, device type, browser version, operating system, session duration, and the pages or game categories you visit. This data helps us maintain service stability and improve user experience across Malaysian mobile networks and broadband connections.

3.5 Communications Data

When you contact our support team via live chat or email, we retain records of those communications in order to track enquiry resolution and improve service quality.

Category	Examples	Mandatory?
Registration Data	Name, email, date of birth, phone number	Yes
Identity Verification	MyKad copy, passport scan, proof of address	For withdrawals & KYC
Financial Data	Transaction history, payment method references	Yes
Usage & Technical Data	IP address, device info, session logs	Automatic
Communications Data	Support chat transcripts, email correspondence	When you contact us

Section 4

Legal Basis for Processing

bossbaby88 processes personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing is required to provide the services you have requested under the bossbaby88 Terms & Conditions — including account creation, transaction processing, and customer support.
• Legal Obligation: Certain processing activities are required to comply with applicable laws, including anti-money laundering regulations, identity verification requirements, and record-keeping obligations.
• Legitimate Interests: We may process data to protect the security and integrity of the Platform, detect fraud, prevent prohibited conduct, and improve our services, provided these interests do not override your fundamental rights and freedoms.
• Consent: Where we send optional marketing communications or deploy non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Section 5

How We Use Your Data

Personal data collected by bossbaby88 is used for the following purposes:

• Creating, verifying, and managing your bossbaby88 account.
• Processing MYR deposits and withdrawals via approved Malaysian payment channels.
• Fulfilling KYC and anti-money laundering checks as required by applicable regulations.
• Providing responsive English-language customer support aligned to Malaysian Standard Time (GMT+8).
• Detecting and preventing fraudulent, prohibited, or suspicious account activity.
• Personalising your experience on the Platform, including relevant game category recommendations where applicable.
• Sending transactional communications — such as deposit confirmations, withdrawal updates, and account security alerts.
• Conducting internal analytics to improve Platform performance, navigation, and stability.
• Complying with audit, legal, and regulatory reporting requirements.
• Supporting responsible gambling obligations, including reviewing patterns of play where welfare concerns arise.

Section 6

Data Sharing & Disclosure

bossbaby88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Personal data is shared only in the following circumstances:

6.1 Payment Processors

To process MYR deposits and withdrawals, limited financial and identity data is transmitted to authorised payment service providers, including those operating FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay. These providers are contractually required to handle your data in accordance with applicable data protection standards.

6.2 Identity Verification Providers

KYC verification may involve sharing identity document data with regulated third-party verification services. All such partners are vetted and bound by appropriate data processing agreements.

6.3 Legal & Regulatory Disclosure

bossbaby88 may disclose personal data when required to do so by law, court order, or the instruction of a competent regulatory authority. In such cases, we will disclose only the minimum information necessary to satisfy the legal requirement.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of the Platform's assets, personal data held by bossbaby88 may be transferred to the successor entity, subject to equivalent data protection obligations being maintained.

Section 7

Cookies & Tracking Technologies

bossbaby88 uses cookies and similar tracking technologies to support Platform functionality and gather aggregated usage analytics. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Required to maintain your login session and enable core platform features. These cannot be disabled without impairing your use of the service.
• Functional Cookies: Remember your preferences such as language settings and display configurations to provide a consistent experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how members navigate the Platform. This information helps us identify performance issues and improve user flows.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of parts of the Platform. bossbaby88 does not use cookies to collect personal data for third-party advertising purposes.

Section 8

Data Retention

bossbaby88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements.

As a general principle, account data and transaction records are retained for a minimum period following account closure in order to comply with anti-money laundering regulations and to resolve any disputes that may arise. Identity verification documents may be retained for longer periods where required by applicable law.

Once personal data is no longer required for any legitimate purpose, it will be securely deleted or anonymised in accordance with our internal data lifecycle procedures.

Section 9

Data Security

bossbaby88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures include:

• Encryption of data in transit using industry-standard TLS protocols.
• Encryption of sensitive data fields at rest within our database systems.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular internal security reviews and vulnerability assessments.
• Incident response procedures to detect, contain, and notify of data breaches within appropriate timeframes.

While bossbaby88 takes reasonable precautions to protect your data, no system is entirely immune to security risks. Members are encouraged to use strong, unique passwords and to enable two-factor authentication where available. If you believe your account has been compromised, contact our support team immediately at [email protected] (plain text — not a clickable link).

Section 10

International Data Transfers

bossbaby88 may engage service providers or infrastructure partners located outside Malaysia. Where personal data is transferred to countries that may not have equivalent data protection legislation, bossbaby88 takes steps to ensure that appropriate safeguards are in place — such as contractual data processing agreements — to protect the transferred data to a standard consistent with this Policy.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia. bossbaby88 will always seek to minimise unnecessary cross-border data transfers and will rely only on vetted, contractually bound partners for any international processing activities.

Section 11

Your Rights

As a Member of bossbaby88, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restriction: You may request that we limit the processing of your data in certain circumstances, such as while a dispute is under investigation.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contract, you may request a copy of your data in a structured, commonly used format.
• Right to Object: You may object to processing based on legitimate interests where you believe your rights and freedoms override those interests.
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, contact the bossbaby88 support team at [email protected] or via live chat in your account dashboard. We will respond to valid requests within a reasonable timeframe and in compliance with applicable data protection obligations. In some cases, we may need to verify your identity before acting on a request.

Section 12

Children & Minors

bossbaby88 is strictly for adults aged 21 years and above. The Platform does not knowingly collect, store, or process personal data from any person under this age. Registration by minors is prohibited, and any account found to have been registered by an underage individual will be immediately closed and any associated funds forfeited.

Parents and guardians are advised to take appropriate steps to prevent minors from accessing online gambling platforms. If you believe a minor has registered an account on bossbaby88, please contact our support team immediately so that corrective action can be taken without delay.

Section 13

Amendments to This Policy

bossbaby88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform services. When material changes are made, we will update the effective date displayed at the top of this page and, where appropriate, notify registered Members via the Platform.

Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. Members are encouraged to review this page periodically to stay informed of how bossbaby88 handles their personal data.

Section 14

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data bossbaby88 holds about you, please use the following contact channels:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, within your bossbaby88 account dashboard.
• Service Hours: 24 hours, operating on Malaysian Standard Time (GMT+8).

We aim to acknowledge all privacy-related enquiries promptly and to provide a substantive response within a reasonable timeframe. For data subject rights requests, we may need to verify your identity before acting on the request.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions of this document are superseded by this current version.